Position Radar Privacy Policy

When you use Position Radar, we collect the following information:

• Your email address (used for sign-in verification and, if you use Position Radar Pro, for position-status notification emails according to your notification settings)
• Your notification preferences (whether notifications are enabled and which position states you have selected as notification triggers)
• Your holdings data (ticker symbols, share quantities, average cost, target allocation, and optional notes)
• Sign-in times and usage records, including whether you viewed Pro explanations, Pricing, and Checkout
• If you choose to sign in with Google: basic profile information provided by Google and received by our authentication service, such as your account name and profile image URL
• If you subscribe to Position Radar Pro: subscription identifiers and status received from our payment provider (such as customer and subscription identifiers, plan, subscription status, and the end date of the current billing period)

We do not require you to provide your legal name, national identification number, or bank account details. Position Radar does not collect or store payment card or payment method details; payments are handled by our payment provider.

We use browser cookies, local storage, and IndexedDB to keep you signed in, remember your language preference, and improve your experience. The language you most recently used is also associated with your account so that notification emails can be sent in that language.

The data we collect is used solely to:

• Provide the Position Radar service (calculating and displaying holding status and portfolio allocation, and simulating changes to that allocation after a contemplated contribution)
• Send sign-in verification emails
• Send Position Radar Pro position-status notification emails according to your notification settings
• Manage subscriptions and access to paid features
• Improve product features and the user experience

We do not sell, rent, or otherwise share your personal data with third parties for marketing purposes.

To operate the service, we rely on the following third-party providers, which may process your data:

• Supabase: database and authentication, with data stored in Japan (AWS Tokyo region, ap-northeast-1)
• Resend: delivery of sign-in verification emails and Position Radar Pro position-status notification emails (notification emails include your email address, stock tickers, and position-status changes)
• Paddle: payment processing and subscription management for Position Radar Pro, acting as Merchant of Record. At checkout, your account email and an account identifier are shared with Paddle to associate the subscription with your account
• Vercel: website hosting and deployment
• Google: OAuth sign-in, which provides basic profile information from your Google account to our authentication service (if you choose to sign in with your Google account)

We retain your data for as long as your account remains active. If you request deletion of your account, we will delete or anonymize the relevant data within a reasonable period, except where retention is required by law.

You have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate personal data we hold (such as your email address)
• Request deletion of your account and all associated data

To exercise any of these rights, please email hello@uminlabs.com. We will typically complete your request within 14 business days.

Position Radar is available only to users aged 18 or older. If you are under 18, please do not use the service.

All information provided by Position Radar consists of derived analytical insights and is provided for informational purposes only. It does not constitute investment advice. Position Radar does not recommend buying, selling, or holding any security. Investment decisions are yours alone, and you bear the associated risks.

We apply reasonable technical and organizational measures to protect your data, including:

• Encrypted transmission over HTTPS
• Secure authentication
• Access controls

That said, no method of transmission over the internet can be guaranteed to be completely secure.

This policy is governed by the applicable laws of the Republic of China (Taiwan).

If we make material changes to this policy, we will notify registered users by email or through a notice within the service.